113 lines
4.0 KiB
PHP
113 lines
4.0 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Mcamara\LaravelLocalization\Facades\LaravelLocalization;
|
|
|
|
class UserLoginController extends Controller
|
|
{
|
|
/**
|
|
* Direct link to user login - can be used in emails
|
|
* Handles the authentication flow:
|
|
* 1. If user not authenticated -> redirect to user login with intended URL
|
|
* 2. If user authenticated but wrong user -> 403 forbidden
|
|
* 3. If correct user -> redirect to intended URL or main page
|
|
* 4. Supports custom intended URL via query parameter
|
|
*/
|
|
public function directLogin(Request $request, $userId)
|
|
{
|
|
\Log::info('UserLoginController: directLogin called', [
|
|
'user_id' => $userId,
|
|
'request_url' => $request->fullUrl(),
|
|
'all_params' => $request->all(),
|
|
]);
|
|
|
|
// Validate user exists
|
|
$user = User::find($userId);
|
|
if (!$user) {
|
|
abort(404, __('User not found'));
|
|
}
|
|
|
|
// Get optional intended destination after successful login
|
|
// Default to main page if not specified
|
|
$intendedUrl = $request->query('intended');
|
|
if (!$intendedUrl) {
|
|
$intendedUrl = LaravelLocalization::localizeURL(
|
|
route('main'),
|
|
$user->lang_preference ?? config('app.fallback_locale')
|
|
);
|
|
}
|
|
|
|
// Check if user is authenticated on web guard
|
|
\Log::info('UserLoginController: Checking authentication', [
|
|
'is_authenticated' => Auth::guard('web')->check(),
|
|
]);
|
|
|
|
if (!Auth::guard('web')->check()) {
|
|
// User not logged in - redirect to user login with return URL
|
|
$returnUrl = LaravelLocalization::localizeURL(
|
|
route('user.direct-login', ['userId' => $userId]),
|
|
$user->lang_preference ?? config('app.fallback_locale')
|
|
);
|
|
if ($intendedUrl) {
|
|
$returnUrl .= '?intended=' . urlencode($intendedUrl);
|
|
}
|
|
|
|
// Get the name parameter from the current request to pass along
|
|
$nameParam = $request->query('name', $user->name);
|
|
|
|
\Log::info('UserLoginController: Redirecting to login', [
|
|
'return_url' => $returnUrl,
|
|
'intended_url' => $intendedUrl,
|
|
'prefill_username' => $nameParam,
|
|
]);
|
|
|
|
// Store in session for Laravel to redirect after login
|
|
session()->put('url.intended', $returnUrl);
|
|
|
|
// Pass username as URL parameter to pre-fill login form
|
|
// Use LaravelLocalization to ensure the parameter is preserved through localization
|
|
$loginUrl = LaravelLocalization::localizeURL(
|
|
route('login'),
|
|
$user->lang_preference ?? config('app.fallback_locale')
|
|
);
|
|
$loginUrl .= '?name=' . urlencode($nameParam);
|
|
|
|
\Log::info('UserLoginController: Redirecting to login with name parameter', [
|
|
'login_url' => $loginUrl,
|
|
'username' => $nameParam,
|
|
]);
|
|
|
|
return redirect()->to($loginUrl, 302, [], false);
|
|
}
|
|
|
|
// User is authenticated - verify they are the correct user
|
|
$authenticatedUser = Auth::guard('web')->user();
|
|
|
|
if ($authenticatedUser->id !== $user->id) {
|
|
abort(403, __('You do not have access to this profile'));
|
|
}
|
|
|
|
// Re-activate profile if inactive
|
|
if (timebank_config('profile_inactive.re-activate_at_login')) {
|
|
if (!$user->isActive()) {
|
|
$user->inactive_at = null;
|
|
$user->save();
|
|
info('User re-activated: ' . $user->name);
|
|
}
|
|
}
|
|
|
|
\Log::info('UserLoginController: Authenticated user verified, redirecting', [
|
|
'user_id' => $authenticatedUser->id,
|
|
'target_user_id' => $user->id,
|
|
'intended_url' => $intendedUrl,
|
|
]);
|
|
|
|
// Redirect to intended URL
|
|
return redirect($intendedUrl);
|
|
}
|
|
}
|